Version: 1.0.4704.0
Release Date: June 4, 2009
Overview | Key Features | Installation Notes | Known Issues
Softerra Adaxes is an end-to-end solution for comprehensive management and visualization of the Active Directory content. The software facilitates the work of Active Directory administrators by automating their day-to-day activities and enabling them to manage several Active Directory domains in one administrative environment. The easy-to-use Web Interface allows any user with sufficient permissions to perform a wide variety of directory-related tasks via a standard web browser. Regular users can use the Web interface as a self-service portal to update their personal information (telephone numbers, home address, etc.), manage their passwords and search the directory. Help Desk technicians can employ the interface to perform basic administrative tasks, such as resetting user passwords, unlocking, enabling or disabling user accounts. Directory administrators or users with appropriate privileges can perform comprehensive management, analysis and monitoring of the Active Directory environment.
Softerra Adaxes offers a wide variety of features essential to create a reliable and secure environment
for complete and automated user life-cycle management.
The key features of Softerra Adaxes include:
Role-Based Security Administration. Role-based administrative model enables Active Directory administrators to organize and efficiently distribute permissions among users. Permissions are arranged in separate units called Security Roles that either allow or deny users to perform a specific range of tasks. Comparing to the native Active Directory security model, Security Roles increase the productivity of Active Directory administrators and reduce the risk of potential errors.
Active Directory Management. Softerra Adaxes provides a rich set of features for Active Directory management that completely satisfies the needs of directory administrators and regular users. The feature set includes:
Directory Search.
Softerra Adaxes provides a powerful search functionality, that enables users to find any Active Directory
objects using the maximally flexible, but simple to specify search criteria. The search can be
performed either across domains or in a specific domain location.
Apart from the Standard search that allows users to locate directory objects by a wide variety of
search parameters, Softerra Adaxes offers the Quick and Alphabetical searches. Quick Search is
useful when the user needs to quickly find an object by its name or a part of the name. Alphabetical Search
allows searching for objects basing on the first letter of object names.
Rules-Based Automation. One of the most valuable features of Softerra Adaxes is the ability to automate routine administrative tasks. Softerra Adaxes allows users to create Business Rules that automatically perform necessary tasks when certain conditions are met. Business Rules allows automatically change the group membership of an object, modify object properties, manage user home directories, move objects to new locations, delete objects, etc.
Streamlined Provisioning and Enterprise Standards Enforcement. Softerra Adaxes provides means to avoid repetitive entering of the same information and helps observing multiple enterprise standards when creating or modifying Active Directory objects. With the help of Property Patterns, administrators can define rules for automatic generation of property values and formatting constraints that don't allow users to enter data that doesn't correspond to the corporate standards.
Approval-Based Workflow. Softerra Adaxes enables administrators to define critical operations that are executed only after the execution is permitted by a responsible person. If a user is trying to perform such an operation, the operation is suspended and an e-mail notification is sent to all its approvers. No changes are made in the directory until an approver allows the execution of the operation.
Dynamic Business Units. Softerra Adaxes allows users to collect Active Directory objects spread over the Active Directory into virtual collections called Business Units. Business Units are used to organize objects in an alternative way to manage them collectively, overcoming the restrictions of domain or organizational structures. Members of Business Units are defined by flexible membership rules that allow to include or exclude objects dynamically, adapting to changes in the Active Directory. Business Units can include or exclude specific objects, group members, container children or results of search queries.
Active Directory Reports. Softerra Adaxes provides an extensive list of Active Directory reports that facilitate analysis and monitoring of the Active Directory environment. Reports can be created either for objects located in a specific Active Directory container or organizational unit, or for all objects in one or several Active Directory domains. Information on objects displayed in each report can be customized to represent data, detailed enough to perform effective analysis.
Logging. By logging all operations performed via Softerra Adaxes in a centralized fashion, the product allows administrators, auditors or any other users to view who performed what operations, when, on what objects, filter data to view all operations performed from a specific host within a specific period of time, etc.
For the product requirements and instructions for Softerra Adaxes installing and uninstalling, see Installation Notes.
SYMPTOMS
The Adaxes service does not start on a workstation and the system event log contains the following error messages:
CAUSE
The Adaxes Service uses the account of the default service administrator to log on to the system. During the service
installation on a workstation (not on a domain controller), the setup program grants the 'Log on as service' right
to this account locally on this workstation via the Local Policy settings. If there is a conflicting domain-based Group
Policy object that grants the 'Log on as service' right to other users, the local right granted by the setup program
will be removed during the Group Policy refresh, because the domain-based Group Policy settings override
the Local Policy settings. If this happens, the Adaxes service will not start.
WORKAROUND
To work around this behavior, contact your domain administrator to grant the 'Log on as service' right to the account of the
default service administrator in a precedent domain-based Group Policy.
STATUS
This behavior is by design. The Domain Group Policy overrides the Local Policy settings.